[FFmpeg-trac] #807(avformat:open): zzuf .mve crashes FFMPEG floating point exception

[FFmpeg]

#807: zzuf .mve crashes FFMPEG floating point exception
-------------------------------------+-------------------------------------
             Reporter:               |                    Owner:
  oanastratulat                      |                   Status:  open
                 Type:  defect       |                Component:  avformat
             Priority:  important    |               Resolution:
              Version:  git-master   |               Blocked By:
             Keywords:  crash fpe    |  Reproduced by developer:  1
  ipmovie                            |
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
Changes (by cehoyos):

 * keywords:   => crash fpe ipmovie
 * status:  new => open
 * component:  FFmpeg => avformat
 * reproduced:  0 => 1


Comment:

 Please always add backtrace for crashes, especially if valgrind does not
 show the source of the crash.
 {{{
 (gdb) r -i corruptfile
 Starting program: ffmpeg_g -i corruptfile
 [Thread debugging using libthread_db enabled]
 ffmpeg version N-35987-g6168e58, Copyright (c) 2000-2011 the FFmpeg
 developers
   built on Dec 20 2011 11:12:48 with gcc 4.5.3
   configuration: --cc='/usr/local/gcc-4.5.3/bin/gcc -m32'
   libavutil    51. 32. 0 / 51. 32. 0
   libavcodec   53. 46. 1 / 53. 46. 1
   libavformat  53. 27. 0 / 53. 27. 0
   libavdevice  53.  4. 0 / 53.  4. 0
   libavfilter   2. 53. 0 /  2. 53. 0
   libswscale    2.  1. 0 /  2.  1. 0

 Program received signal SIGFPE, Arithmetic exception.
 0x080b9887 in load_ipmovie_packet (s=0x8dbe020, pb=0x8dc6060,
 pkt=0xffffca50) at libavformat/ipmovie.c:138
 138                 (s->audio_chunk_size / s->audio_channels /
 (s->audio_bits / 8));
 (gdb) kill
 Kill the program being debugged? (y or n) y
 (gdb) r -i corruptfile
 Starting program: /home/cehoyos/Projects/FFmpeg/ffmpeg_g -i corruptfile
 [Thread debugging using libthread_db enabled]
 ffmpeg version N-35987-g6168e58, Copyright (c) 2000-2011 the FFmpeg
 developers
   built on Dec 20 2011 11:12:48 with gcc 4.5.3
   configuration: --cc='/usr/local/gcc-4.5.3/bin/gcc -m32'
   libavutil    51. 32. 0 / 51. 32. 0
   libavcodec   53. 46. 1 / 53. 46. 1
   libavformat  53. 27. 0 / 53. 27. 0
   libavdevice  53.  4. 0 / 53.  4. 0
   libavfilter   2. 53. 0 /  2. 53. 0
   libswscale    2.  1. 0 /  2.  1. 0

 Program received signal SIGFPE, Arithmetic exception.
 0x080b9887 in load_ipmovie_packet (s=0x8dbe020, pb=0x8dc6060,
 pkt=0xffffca50) at libavformat/ipmovie.c:138
 138                 (s->audio_chunk_size / s->audio_channels /
 (s->audio_bits / 8));
 (gdb) bt
 #0  0x080b9887 in load_ipmovie_packet (s=0x8dbe020, pb=0x8dc6060,
 pkt=0xffffca50)
     at libavformat/ipmovie.c:138
 #1  0x080b9b3d in process_ipmovie_chunk (s=0x8dbe020, pb=0x8dc6060,
 pkt=0xffffca50)
     at libavformat/ipmovie.c:223
 #2  0x080ba3b4 in ipmovie_read_header (s=0x8dbdaa0, ap=0xffffcb04) at
 libavformat/ipmovie.c:559
 #3  0x081478ca in avformat_open_input (ps=0xffffcc7c, filename=0xffffd274
 "corruptfile", fmt=0x0,
     options=0x8d0ad48) at libavformat/utils.c:709
 #4  0x080571f4 in opt_input_file (o=0xffffcdc0, opt=0xffffd272 "i",
 filename=<value optimized out>)
     at ffmpeg.c:3468
 #5  0x0805bdc2 in parse_option (optctx=0xffffcdc0, opt=0xffffd272 "i",
 arg=0xffffd274 "corruptfile",
     options=0x86ef3e0) at cmdutils.c:292
 #6  0x0805c07b in parse_options (optctx=0xffffcdc0, argc=3,
 argv=0xffffd004, options=0x86ef3e0,
     parse_arg_function=0x8058d30 <opt_output_file>) at cmdutils.c:325
 #7  0x0805a56f in main (argc=3, argv=0xffffd004) at ffmpeg.c:4865
 (gdb) print s->audio_bits
 $1 = 0
 }}}

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/807#comment:1>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker